Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a393030303a3a2f33362d3336203d3e20323639323534.roa
File:                     323830343a363163303a393030303a3a2f33362d3336203d3e20323639323534.roa (raw, json)
Hash identifier:          8Do4LHakGj+x7FV0TY8tFfNR8L3rjQ90rHkfI4eXgUE=
Subject key identifier:   D1:2E:EC:BF:BB:04:F7:35:E9:5B:2C:ED:C8:88:25:43:CF:4B:0F:0E
Certificate issuer:       /CN=BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD
Certificate serial:       0168EFE6CA00730D636905ECD096C13CF35F07B8
Authority key identifier: BF:0A:CF:D3:E7:E2:E4:70:DD:0F:66:25:00:BF:9D:01:9A:38:E9:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a393030303a3a2f33362d3336203d3e20323639323534.roa
Signing time:             Mon 27 Sep 2021 15:46:04 +0000
ROA not before:           Mon 27 Sep 2021 15:41:04 +0000
ROA not after:            Mon 26 Sep 2022 15:46:04 +0000
asID:                     269254
IP address blocks:        2804:61c0:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:68:ef:e6:ca:00:73:0d:63:69:05:ec:d0:96:c1:3c:f3:5f:07:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD
        Validity
            Not Before: Sep 27 15:41:04 2021 GMT
            Not After : Sep 26 15:46:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:c0:d9:31:a1:4f:13:81:50:db:e6:0a:8a:
                    da:2e:7c:da:f3:83:47:29:2b:dd:af:72:cf:56:9a:
                    9f:25:d0:33:1d:73:fa:c4:37:f7:30:ab:9a:d1:57:
                    fb:2d:15:bb:77:5f:41:3c:56:8f:81:5a:f1:36:28:
                    8f:ff:65:5e:5e:73:5c:aa:d2:dc:0e:96:59:50:98:
                    58:7d:65:4f:76:cb:cd:62:60:a5:63:0c:90:63:a3:
                    48:46:96:17:a8:35:aa:b3:de:b6:28:2d:9f:88:35:
                    61:5e:66:ed:13:ed:47:70:17:c1:38:21:d2:ee:6d:
                    c3:20:ba:42:bb:a9:98:3f:1c:cc:1c:03:1f:69:b2:
                    f9:b6:43:ab:73:be:e8:4c:ee:f5:55:d2:6a:77:36:
                    a7:7d:cd:36:96:94:91:1a:3e:07:f2:97:eb:2b:21:
                    d2:8f:67:d3:18:fe:4f:f6:f2:20:04:a0:98:27:8f:
                    ef:b9:00:63:ca:a4:74:9b:16:1e:c3:66:c4:e5:1d:
                    6a:a2:15:36:ba:79:bd:68:cb:8f:5a:3f:b2:35:54:
                    47:76:98:85:59:fe:27:77:1f:e8:87:e2:f5:e5:a7:
                    30:71:e3:a2:6b:20:7f:a3:d1:98:08:69:20:c2:64:
                    ab:4e:13:bf:15:93:b0:c0:a9:b2:b5:2c:5d:f4:e5:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:EC:BF:BB:04:F7:35:E9:5B:2C:ED:C8:88:25:43:CF:4B:0F:0E
            X509v3 Authority Key Identifier:
                keyid:BF:0A:CF:D3:E7:E2:E4:70:DD:0F:66:25:00:BF:9D:01:9A:38:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a393030303a3a2f33362d3336203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:c2:08:3e:d7:9f:b2:c5:7e:9e:0b:db:77:70:4c:e9:fc:
         8a:83:56:79:9a:37:2f:bd:39:21:0e:8e:61:7b:f2:35:9c:fd:
         bf:3a:c2:5e:f2:84:e3:c3:a5:42:1b:29:76:2a:d5:22:c5:12:
         42:64:1a:15:88:55:c2:53:4a:29:5d:30:f5:37:50:30:02:b4:
         15:8b:6a:88:55:64:39:cb:74:05:89:f5:5c:ad:9f:36:7a:f8:
         8f:1f:6b:94:80:f0:c8:64:63:48:c0:64:c1:8a:9e:8c:35:ff:
         c5:5a:9f:13:31:24:81:0d:cf:b9:a7:5d:7f:80:24:f8:3e:aa:
         1a:e3:53:bd:c0:1f:3a:76:dd:fd:5c:6a:aa:01:c3:09:c1:70:
         6b:7e:a8:6e:be:53:5d:87:bf:d8:27:d4:b5:98:8d:37:24:8a:
         21:6f:34:d6:72:1a:e2:77:f3:9c:e3:09:55:17:3b:03:d2:50:
         fc:14:ec:e7:3b:5b:64:38:e8:0b:0f:45:f2:81:39:22:c5:48:
         11:83:3b:dc:9b:c5:45:56:5f:bd:ef:5f:e8:f3:af:90:7f:a4:
         b6:63:b3:ea:33:ce:05:5f:62:e4:22:de:75:80:21:49:49:89:
         e5:c9:20:ee:cb:8f:8a:35:68:46:ac:a1:c8:04:22:a5:bc:ff:
         96:4a:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org